Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa
File:                     a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa (raw, json)
Hash identifier:          iDxcfB0Vql2n3uoVFtstOYhJ8Us6Z1OdbSD15eT0gZ0=
Subject key identifier:   DA:CF:1F:D9:95:74:12:A1:EE:40:FE:37:B8:D5:4A:BC:E9:FB:39:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E2408F6B5470E87F5BB02985487AA08072522F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa
Signing time:             Tue 28 Oct 2025 01:01:55 +0000
ROA not before:           Tue 28 Oct 2025 01:01:55 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.172.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:24:08:f6:b5:47:0e:87:f5:bb:02:98:54:87:aa:08:07:25:22:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 01:01:55 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=33d9fcc717dcd22f22c66cfb8801f07407c37546fcb9f854c9bdf2186372959f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:86:18:ff:39:9c:ab:01:95:06:1f:3c:0b:
                    ca:92:ee:1c:ca:73:86:68:86:d3:4b:0b:93:b2:5d:
                    45:e9:94:69:de:62:07:0f:7c:49:40:a6:27:42:27:
                    c1:1a:2a:ac:a9:3b:21:52:6e:9c:8c:7b:be:69:30:
                    7a:13:e3:56:65:8a:53:bc:44:52:49:3f:eb:4a:a6:
                    ec:93:f8:cd:7c:42:39:6c:e2:77:a3:7c:08:cf:d1:
                    08:10:e8:37:8c:13:31:99:96:b4:67:a4:79:e6:9f:
                    0d:4b:17:aa:5c:da:05:11:44:9c:fa:0e:0b:23:bb:
                    35:ee:b7:19:b2:a3:56:d8:42:ce:f6:ba:c9:0a:df:
                    33:36:38:c8:61:91:4d:59:3a:76:77:c9:85:c3:9c:
                    42:37:d4:1a:31:ce:2a:73:51:68:f4:30:5f:64:9c:
                    1f:33:6f:ad:61:c1:bf:67:4f:02:e2:02:74:ed:31:
                    c2:af:db:6c:a0:c3:e7:29:31:0c:8b:b6:50:7a:45:
                    72:83:b2:ac:38:78:fe:25:57:a0:27:5a:82:5a:a4:
                    c5:b8:38:46:ed:fb:b1:f0:5a:ed:5e:d9:c9:9c:8f:
                    55:ce:3c:30:a8:ca:70:7f:15:e3:56:7d:e7:97:61:
                    cc:85:87:fa:64:79:4f:4c:25:5a:17:68:e1:3a:73:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CF:1F:D9:95:74:12:A1:EE:40:FE:37:B8:D5:4A:BC:E9:FB:39:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.172.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:a6:de:07:18:81:fc:a6:7d:56:cc:1f:4c:cd:b5:38:3f:
         0b:ff:f4:a4:df:67:b7:8e:d3:7e:f9:21:ac:b2:5e:39:11:25:
         56:4e:e0:93:7f:78:82:04:5e:14:40:50:8e:3e:9f:4d:8f:b9:
         a9:9f:71:8e:0f:b9:66:a8:8a:48:38:3f:b8:57:6f:62:37:37:
         56:63:a8:69:35:2a:b8:cd:62:24:03:c3:bd:3b:d9:5f:1b:c4:
         8d:52:ea:3e:66:39:96:11:6b:5f:9a:c6:02:ff:8d:4b:67:8c:
         c3:48:42:57:92:ed:95:8f:f5:e5:5d:90:8b:65:68:87:fc:64:
         ed:fa:05:dd:e0:da:ec:c2:42:d8:11:e3:fb:c3:40:ba:13:49:
         14:d1:01:ac:d1:8b:89:b4:ad:4b:19:6e:63:86:11:ae:d0:ca:
         06:09:0c:4d:db:48:2d:e3:d9:73:12:a3:51:ae:6d:d4:f1:ea:
         b7:0c:f9:1e:cc:7d:41:fd:0c:d7:28:08:e2:0f:22:49:49:ab:
         1c:0d:b5:49:31:69:cc:83:a8:7d:21:96:bc:05:f7:9c:61:3e:
         17:43:93:5a:a6:26:f9:ad:b7:86:81:fc:48:98:bb:ff:44:91:
         ec:23:29:07:05:a0:2f:3e:6a:94:47:ec:33:49:42:d6:3c:20:
         da:a3:a0:64
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPiQI9rVHDof1uwKYVIeqCAclIvUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDEwMTU1WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzM2Q5ZmNjNzE3ZGNkMjJmMjJjNjZjZmI4ODAxZjA3NDA3
YzM3NTQ2ZmNiOWY4NTRjOWJkZjIxODYzNzI5NTlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdZ4YY/zmcqwGVBh88C8qS7hzKc4ZohtNLC5OyXUXplGne
YgcPfElApidCJ8EaKqypOyFSbpyMe75pMHoT41ZlilO8RFJJP+tKpuyT+M18Qjls
4nejfAjP0QgQ6DeMEzGZlrRnpHnmnw1LF6pc2gURRJz6DgsjuzXutxmyo1bYQs72
uskK3zM2OMhhkU1ZOnZ3yYXDnEI31BoxzipzUWj0MF9knB8zb61hwb9nTwLiAnTt
McKv22ygw+cpMQyLtlB6RXKDsqw4eP4lV6AnWoJapMW4OEbt+7HwWu1e2cmcj1XO
PDCoynB/FeNWfeeXYcyFh/pkeU9MJVoXaOE6c3NvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2s8f2ZV0EqHuQP43uNVKvOn7OZgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E4NTZjN2I3LTgwZDQtNGU1YS05YmVhLTQyMjFjODQ1YzFhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZFrAAwDQYJKoZIhvcNAQELBQADggEBABaLpt4HGIH8pn1WzB9MzbU4Pwv/
9KTfZ7eO0375IayyXjkRJVZO4JN/eIIEXhRAUI4+n02PuamfcY4PuWaoikg4P7hX
b2I3N1ZjqGk1KrjNYiQDw7072V8bxI1S6j5mOZYRa1+axgL/jUtnjMNIQleS7ZWP
9eVdkItlaIf8ZO36Bd3g2uzCQtgR4/vDQLoTSRTRAazRi4m0rUsZbmOGEa7QygYJ
DE3bSC3j2XMSo1GubdTx6rcM+R7MfUH9DNcoCOIPIklJqxwNtUkxacyDqH0hlrwF
95xhPhdDk1qmJvmtt4aB/EiYu/9EkewjKQcFoC8+apRH7DNJQtY8INqjoGQ=
-----END CERTIFICATE-----